Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: omkX9m2JGxuk51qE6BkzZrZ39ZNgh4EOdXekEvF1YC0=
Subject key identifier: F0:0D:C4:7B:15:D4:34:7C:C0:01:DA:3A:65:E3:AA:00:89:67:0E:CD
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 01963E0B3C4D9CAE45F9CF62DB1844094FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1379
Signing time: Wed 16 Apr 2025 10:00:45 +0000
Manifest this update: Wed 16 Apr 2025 10:00:45 +0000
Manifest next update: Thu 17 Apr 2025 10:00:45 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: 8QmwrbVrlYDqfyYFqrBc1t69i7Hi6Pc74RxbnjfqfZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:3c:4d:9c:ae:45:f9:cf:62:db:18:44:09:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Apr 16 10:00:45 2025 GMT
Not After : Apr 17 10:00:45 2025 GMT
Subject: CN=f00dc47b15d4347cc001da3a65e3aa0089670ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:d8:6e:3d:c2:e8:fd:24:c3:e0:8c:6e:3b:
8d:1a:70:1f:d1:a2:83:07:62:5e:99:d0:b3:9f:a3:
2a:35:87:0c:2a:cd:e2:7c:d2:8d:29:de:84:67:0f:
e4:5d:3e:6b:17:51:f7:ec:82:91:cc:e3:14:f4:ee:
6d:34:f4:db:80:cc:13:4f:87:d3:9d:21:0e:5c:cc:
59:47:49:2e:26:3d:b8:bd:bc:a4:96:38:ab:37:e5:
ec:bd:00:81:94:64:e4:e1:cd:62:76:90:a0:d5:8c:
a7:92:d1:dc:0b:07:57:c6:51:e8:5c:78:a7:23:fa:
d8:c5:fb:65:27:84:cd:38:c6:00:44:c5:73:96:98:
34:79:a4:32:37:6e:03:43:21:09:c5:94:19:fa:e8:
79:52:6b:a7:b7:0a:d5:d0:75:fd:a3:cc:69:fa:8b:
a0:74:9b:f5:8d:b8:cf:fa:d5:90:76:46:5e:1a:e9:
80:ff:60:3c:c8:8c:2b:69:7a:b7:4a:66:1f:7f:a2:
04:1c:4f:5d:8c:83:8c:5f:08:a7:0f:2b:fa:38:30:
7c:4b:c7:00:14:e0:27:bf:3a:a8:73:23:b3:70:27:
a2:33:d7:87:d6:12:a0:70:e5:bc:61:b7:08:3f:43:
82:fc:01:95:06:e6:57:63:de:fb:f0:01:71:ff:ec:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:C4:7B:15:D4:34:7C:C0:01:DA:3A:65:E3:AA:00:89:67:0E:CD
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:86:e8:7a:51:ce:0b:ac:9f:34:35:ac:51:37:af:33:91:bb:
5f:90:d2:5c:16:25:20:02:ec:c6:53:a8:9e:03:85:79:db:61:
3d:9e:07:9b:82:e6:72:cb:9a:15:e5:81:92:b3:26:32:1f:7f:
e9:9d:98:23:09:62:83:60:7a:4b:32:8b:e5:8c:f8:b7:f4:16:
fa:6e:7c:a7:19:f1:df:b9:58:27:b4:1f:b8:a9:22:9b:e9:d3:
59:6c:ec:c5:b5:4f:90:0e:cc:ed:74:76:47:9b:78:bc:f2:b7:
a0:04:01:24:16:3b:47:0a:76:f1:01:22:02:21:f8:2d:46:29:
d5:42:b1:dd:23:a2:4a:94:be:fa:ed:fd:ad:2a:24:95:c6:52:
e8:1d:ce:0b:a5:79:d1:ec:13:62:06:40:5b:9d:0d:65:87:5b:
c9:84:c1:d3:09:eb:2e:b8:c3:c1:4f:59:81:43:1c:48:a6:b7:
80:44:ad:b6:48:48:11:98:22:ca:e3:56:b2:03:cb:83:11:50:
4e:21:cd:47:00:cd:5a:80:17:73:9a:cb:6f:5f:03:f6:e7:a4:
4c:22:54:04:57:73:60:34:30:43:1d:9d:ce:5f:8f:b7:07:36:
49:95:f6:e1:0c:fc:b9:f8:34:5c:8c:8b:7d:2a:3a:ba:11:79:
cb:c7:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:01:53 2025 by rpki-client